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CLAIMS 

1. A method for collecting network usage data of a user, 
comprising the following steps: 

(1) an access device authenticating and authorizing the user, 
and an Authentication, Authorization and Accounting Server 
(hereinafter referred to as AAA server) recording the user' s network 
resource information authenticated and authorized; 

(2) a router, during network access, recording network usage 
information, and sending the network usage information to a 
NetStream Collector (hereinafter referred to as NSC) with User 
Datagram Protocol messages; 

(3) the NSC aggregating the collected network usage 
information; 

(4) the association analysis server performing real-time 
association analysis for the aggregated network usage information 
and the user's network resource information uploaded from the AAA 
server to obtain detailed network usage data of the user. 

2. The method according to claim 1, wherein the access device 
in step (1) is one of LAN switch, access server, or IP phone gateway. 

3. The method according to claim 1, wherein step (1) in which 
the access device authenticates and authorizes the user and the 
AAA server records the user's network resource information 
comprises the following steps: 

(1) the access device sending the user's authentication and 
authorization data to the AAA server; 

(2) the AAA server analyzing and recording the user's 
authentication and authorization data, and sending control 
information of the network access permission to the access device; 

(3) the access device allocating resources to the user and 
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sending the user's network resource information to the AAA server, 
which records the user's network resource information; 

(4) the AAA server forwarding the user's network resource 
information to the association analysis server in real time. 

4. The method according to claim 3, wherein in step (3), the 
resources allocated by the access device to the user comprise: IP 
address, start time and stop time of network access. 

5. The method according to claim 3, wherein in step (-3) , the 
resources allocated by the access device to the user comprise: IP 
address, start time and stop time of network access, and bandwidth. 

6. The method according to claim 3, wherein in step (3), the 
user's network resource information recorded by the AAA server 
comprises: user's account number, start time and stop time of 
network access, IP address, network access location, and service 
attribute . 

7. The method according to claim 1, wherein in step (2), the 
network usage information recorded by the router comprises: source 
IP address, destination IP address , source port number, destination 
port number, number of bytes, and timestamp. 

8. The method according to claim 1, wherein the association 
analysis in step (4) comprises: matching the IP address and the 
start time and stop time of network access in the user's network 
resource information to the IP address and the timestamp in the 
network usage information, to determine the user corresponding to 
the network usage information. 



